Method and system for secure and verifiable offline blockchain transactions

Patent metadata

Field	Value
Publication number	US-12437296-B2
Application number	US-202217848770-A
Country	US
Kind code	B2
Filing date	Jun 24, 2022
Priority date	Jul 12, 2019
Publication date	Oct 7, 2025
Grant date	Oct 7, 2025

Abstract

A method for performing secure, verifiable, offline blockchain transactions through a trusted execution environment and time-limited credentials includes: transmitting, by a computing device, to a gateway device, a request for a time-limited credential, the time-limited credential authorizing an offline blockchain transaction; receiving, by the computing device the time-limited credential from the gateway device; receiving, by the computing device, from an external device, at least a transaction amount and a destination address for the offline blockchain transaction, wherein the computing device and the external device are offline from the blockchain network; and generating, by the computing device, a blockchain data value for the offline blockchain transaction, wherein the blockchain data value includes at least the transaction amount and the destination address.

First claim

What is claimed is:

1. A method for performing secure, verifiable, offline blockchain transactions through a trusted execution environment and time-limited credentials, comprising:
transmitting, by a computing device, to a gateway device, a request for a time-limited credential, the time-limited credential authorizing an offline blockchain transaction that complies with one or more predetermined conditions;
receiving, by the computing device, the time-limited credential from the gateway device and an asset state, the asset state being a cryptocurrency balance of a blockchain wallet associated with the computing device;
receiving, by the computing device, from an external device, at least a transaction amount and a destination address for the offline blockchain transaction, wherein the computing device and the external device are offline from a blockchain network;
verifying, by the computing device while offline from the blockchain network, the transaction amount is equal to or less than the asset state;
generating, by the computing device while offline from the blockchain network, a blockchain data value for the offline blockchain transaction, wherein the blockchain data value includes at least the transaction amount and the destination address;
transmitting, by the computing device while offline from the blockchain network, the blockchain data value and the time-limited credential to the external device; and
receiving, by the computing device, from the gateway device, a notification including an updated cryptocurrency balance of the blockchain wallet associated with the computing device.

2. The method of claim 1 , including:
storing, in a trusted execution environment of the computing device, a cryptographic key pair, the cryptographic key pair including a public key and a private key; and
digitally signing, by the trusted execution environment of the computing device, the generated blockchain data value using the private key.

3. The method of claim 1 , wherein the time-limited credential is one of a digital certificate, a digital signature generated by the gateway device, a random value, and a pseudo-random value.

4. The method of claim 1 , wherein the time-limited credential is valid for a single offline blockchain transaction.

5. The method of claim 1 wherein the receiving the time-limited credential from the gateway device includes:
receiving, by the computing device, a plurality of single-use time-limited credentials, wherein the plurality of single-use time-limited credentials has a pre-determined order for usage.

6. The method of claim 1 , wherein the time-limited credential is valid for multiple offline blockchain transactions.

7. The method of claim 2 , wherein the time-limited credential sets a time limit for the external device to submit the signed blockchain data value to the blockchain network for verification.

8. The method of claim 1 , including:
storing, in a memory of the computing device, the asset state, where the asset state includes at least one or more unspent transaction outputs and associated currency amounts; and
wherein the verifying the blockchain wallet cryptocurrency balance includes:
verifying, by the computing device, the asset state of the computing device.

9. The method of claim 8 , including:
updating, by the computing device, the stored asset state based on the generated blockchain data value.

10. The method of claim 1 , including:
receiving, by the gateway device, from the external device, the blockchain data value and the time-limited credential, wherein the external device is connected to the blockchain network;
verifying, by the gateway device, the blockchain data value complies with the one or more predetermined conditions;
in response to successful verification:
transmitting, by the gateway device when the gateway device is connected to the blockchain network, the blockchain data value to the blockchain network for confirmation and addition to a blockchain of the blockchain network;
transmitting, by the gateway device, a notification message to the external device and the computing device.

11. A system for performing offline blockchain transactions through a trusted execution environment and time-limited credentials, comprising:
a gateway device of a blockchain network;
an external device; and
a computing device including:
a transmitter transmitting to the gateway device, a request for a time-limited credential, the time-limited credential authorizing an offline blockchain transaction that complies with one or more predetermined conditions,
a receiver receiving, from the gateway device, the time-limited credential and an asset state, the asset state being a cryptocurrency balance of a blockchain wallet associated with the computing device,
the receiver receiving from an external device, at least a transaction amount and a destination address for the offline blockchain transaction, wherein the computing device and the external device are offline from the blockchain network,
a processing device verifying, while offline from the blockchain network, the transaction amount is equal to or less than the asset state,
the processing device generating, while offline from the blockchain network, a blockchain data value for the offline blockchain transaction, wherein the blockchain data value includes at least the transaction amount and the destination address,
the transmitter transmitting to the external device, while offline from the blockchain network, the blockchain data value and the time-limited credential, and
the receiver receiving, from the gateway device, a notification including an updated cryptocurrency balance of the blockchain wallet associated with the computing device.

12. The system of claim 11 , wherein the computing device includes:
a trusted execution environment storing a cryptographic key pair, the cryptographic key pair including a public key and a private key, and
the trusted execution environment digitally signing the generated blockchain data value using the private key.

13. The system of claim 11 , wherein the time-limited credential is one of a digital certificate, a digital signature generated by the gateway device, a random value, and a pseudo-random value.

14. The system of claim 11 , wherein the time-limited credential is valid for a single offline blockchain transaction.

15. The system of claim 11 , wherein the receiving the time-limited credential from the gateway device includes:
receiving, by the receiver of the computing device, a plurality of single-use time-limited credentials, wherein the plurality of single-use time-limited credentials has a pre-determined order for usage.

16. The system of claim 11 , wherein the time-limited credential is valid for multiple offline blockchain transactions.

17. The system of claim 12 , wherein the time-limited credential sets a time limit for the external device to submit the signed blockchain data value to the blockchain network for verification.

18. The system of claim 11 , including:
a memory of the computing device storing an asset state for the computing device, where the asset state includes at least one or more unspent transaction outputs and associated currency amounts; and
wherein the verifying the blockchain wallet cryptocurrency balance includes:
the processing device of the computing device verifying the asset state of the computing device.

19. The system of claim 18 , wherein the processing device of the computing device updates the stored asset state based on the g

Assignees

• Mastercard International Inc

Inventors

• Higgins Stephen

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• G06Q20/027

  involving a payment switch or gateway · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title